Install instructions for both DEB and RPM based distributions, located at
suggest fetching Jenkins-CI public key from an HTTP only link.
That's a bad practice, especially if you consider that the HTTPS link already properly works. Just adding an 's' to the link would make things much better.
I haven't checked what happens for other distributions.